This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft File: hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft (raw, json) Hash identifier: ex8jJUgm0EVAGQqu4p8cH24HrKEdsu5aMW/kIBgIuyU= Subject key identifier: 6F:6E:B6:9D:DF:28:EC:FC:66:9C:D2:B9:08:68:9B:5B:0B:F3:5B:F5 Authority key identifier: 86:4D:2F:0C:46:75:2B:F0:69:73:8F:BA:67:EF:E2:F6:B8:B6:2C:C4 Certificate issuer: /CN=864d2f0c46752bf069738fba67efe2f6b8b62cc4 Certificate serial: 019B5A88C97544ECEB2D3EFB9BF197B8BE93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft Manifest number: 1A Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: 2KQ_sA42Hg8XlmVkRHuQHbLnwnU.roa (hash: emnblHjExcXiEHevT+4EWU1LxAJDxlybageeiGlQMiE=) 2: hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl (hash: ZVDIlWdYvzm094qas9RlSYd+z5SMhM3fpdRmff7ldAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c9:75:44:ec:eb:2d:3e:fb:9b:f1:97:b8:be:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864d2f0c46752bf069738fba67efe2f6b8b62cc4 Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=6f6eb69ddf28ecfc669cd2b908689b5b0bf35bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:b6:fa:bc:c0:09:88:a4:92:fd:3d:b0:ff: 65:6c:71:eb:93:dc:a4:af:ed:7e:94:22:db:d7:0e: e6:02:7e:23:21:7f:3d:df:0c:d4:f3:f7:66:93:5f: 17:7d:0e:62:fa:eb:06:cc:23:d7:3b:0e:a5:09:eb: ef:a6:99:0b:be:ff:a8:cf:03:2a:18:4f:e2:7a:23: 0b:e2:42:4c:2d:62:45:ce:9f:43:b5:69:80:dc:c2: f8:e5:d1:33:c7:31:5e:40:3b:e3:79:30:97:a1:47: 36:9f:6b:0f:6e:1d:fb:24:b5:d5:46:86:92:a1:e2: 68:3b:e9:c4:d9:25:94:27:8e:ec:cc:b4:c3:c5:90: b4:e3:9e:97:e1:ce:75:43:57:de:e2:c1:53:c3:5e: 00:2d:93:b9:92:a2:9c:b5:21:b4:49:dc:c2:62:1d: ed:8b:7d:71:ee:c8:63:90:b1:65:96:5f:65:26:fb: 52:cb:2c:e8:f0:d3:e4:d3:86:90:f2:c7:59:8e:83: 4d:be:b6:15:a2:f8:74:7a:b0:4d:4e:23:5b:c8:55: 36:cf:ff:91:59:7c:1c:fc:be:bb:c3:d6:52:45:57: cc:7f:a5:45:de:f6:90:3a:f6:ad:ab:65:a5:ba:24: 87:93:02:a5:83:bf:e1:54:28:1f:33:13:40:04:22: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:B6:9D:DF:28:EC:FC:66:9C:D2:B9:08:68:9B:5B:0B:F3:5B:F5 X509v3 Authority Key Identifier: keyid:86:4D:2F:0C:46:75:2B:F0:69:73:8F:BA:67:EF:E2:F6:B8:B6:2C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f4:02:ee:0c:9d:1a:cd:3e:d3:49:f7:78:71:25:af:83:12: d9:43:9b:d6:58:1e:00:38:8b:96:e4:6c:df:b4:16:58:dc:63: 73:e4:5f:c4:5d:84:ae:cb:81:63:56:24:c4:9a:b3:71:38:0d: 89:47:39:ce:4e:8b:ad:d1:24:64:24:ed:78:c6:09:44:a0:2f: 74:b3:82:85:be:27:b4:76:ee:44:88:f1:10:24:e3:aa:de:47: 9a:7e:b7:ed:71:00:9d:04:10:d7:96:3f:45:b3:d2:e8:13:de: 6f:97:5b:2f:0b:15:dd:13:2a:b9:87:78:c5:ff:f5:50:ea:b7: 57:ac:42:6c:e4:88:e2:3e:63:a9:6e:90:f4:17:0e:2b:f0:d1: 4b:05:9a:a2:88:94:80:ad:93:5d:53:9a:30:b8:ad:14:9e:f3: 84:66:99:c1:d0:cf:5e:ab:28:c0:b3:4a:f4:a3:76:80:b3:ec: 04:17:36:7f:e1:59:e8:94:c3:f2:b1:6b:c4:76:a4:74:46:77: e3:03:33:8b:1e:86:55:bc:fb:7b:24:12:6c:62:41:12:01:48: 23:30:8c:8c:d9:65:f7:11:ad:df:59:50:29:2e:c3:77:8d:7a: 84:e2:f1:a3:83:5f:7d:9c:bb:12:4d:8e:8a:6a:1a:00:2b:6d: cc:46:a4:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMl1ROzrLT77m/GXuL6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGQyZjBjNDY3NTJiZjA2OTczOGZiYTY3ZWZlMmY2Yjhi NjJjYzQwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD Eyg2ZjZlYjY5ZGRmMjhlY2ZjNjY5Y2QyYjkwODY4OWI1YjBiZjM1YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4m2+rzACYikkv09sP9lbHHrk9yk r+1+lCLb1w7mAn4jIX893wzU8/dmk18XfQ5i+usGzCPXOw6lCevvppkLvv+ozwMq GE/ieiML4kJMLWJFzp9DtWmA3ML45dEzxzFeQDvjeTCXoUc2n2sPbh37JLXVRoaS oeJoO+nE2SWUJ47szLTDxZC0456X4c51Q1fe4sFTw14ALZO5kqKctSG0SdzCYh3t i31x7shjkLFlll9lJvtSyyzo8NPk04aQ8sdZjoNNvrYVovh0erBNTiNbyFU2z/+R WXwc/L67w9ZSRVfMf6VF3vaQOvatq2WluiSHkwKlg7/hVCgfMxNABCJKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9utp3fKOz8ZpzSuQhom1sL81v1MB8GA1UdIwQY MBaAFIZNLwxGdSvwaXOPumfv4va4tizEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGswdkRFWjFLX0JwYzQtNlotX2k5cmkyTE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84ZTJkNmMtMTQ4MS00ODQ0LWE3ZWUt MWZhNTQwYjcyMWMyLzEvaGswdkRFWjFLX0JwYzQtNlotX2k5cmkyTE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84ZTJkNmMtMTQ4MS00ODQ0LWE3ZWUtMWZhNTQwYjcyMWMy LzEvaGswdkRFWjFLX0JwYzQtNlotX2k5cmkyTE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/QC7gyd Gs0+00n3eHElr4MS2UOb1lgeADiLluRs37QWWNxjc+RfxF2ErsuBY1YkxJqzcTgN iUc5zk6LrdEkZCTteMYJRKAvdLOChb4ntHbuRIjxECTjqt5Hmn637XEAnQQQ15Y/ RbPS6BPeb5dbLwsV3RMquYd4xf/1UOq3V6xCbOSI4j5jqW6Q9BcOK/DRSwWaooiU gK2TXVOaMLitFJ7zhGaZwdDPXqsowLNK9KN2gLPsBBc2f+FZ6JTD8rFrxHakdEZ3 4wMzix6GVbz7eyQSbGJBEgFIIzCMjNll9xGt31lQKS7Dd416hOLxo4NffZy7Ek2O imoaACttzEak7A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client